Privacy Policy

Effective Date: 6/2/2025

1. Introduction

At XNOPay, operated by Strawberry Labs LLC, we are committed to protecting your privacy and ensuring the security of any information you share with us. This Privacy Policy explains how we collect, use, and protect information when you use our Services.

Key Point: As a non-custodial service, we never have access to your private keys or funds. Your financial sovereignty is paramount to us.

2. Information We Collect

We collect minimal information necessary to provide our Services:

2.1 Information You Provide

  • Email Address: Only when you voluntarily sign up for updates or notifications
  • Business Information: For merchants requesting payment processor access (business name and email)
  • Support Inquiries: Information you provide when contacting us for support

2.2 Automatically Collected Information

  • Usage Data: Anonymous analytics about how our Services are used
  • Device Information: Browser type, operating system, and device type
  • IP Address: For security and fraud prevention purposes
  • Referrer Information: How you arrived at our website

3. Information We Do NOT Collect

Your privacy is our priority. We explicitly DO NOT collect or have access to:

  • Your private keys or seed phrases
  • Your wallet passwords or PINs
  • Your transaction history (beyond what is publicly visible on the blockchain)
  • Your wallet balances (beyond what is publicly visible on the blockchain)
  • Your personal identification documents

4. How We Use Information

We use collected information solely to:

  • Provide and improve our Services
  • Send updates and notifications (only if you opted in)
  • Respond to support inquiries
  • Prevent fraud and ensure security
  • Comply with legal obligations
  • Generate anonymous analytics to improve user experience

5. Payment Processing Privacy

When using our payment processor:

  • Ephemeral addresses are created temporarily for each transaction
  • These addresses are not linked to your identity
  • Payment data is processed in real-time and not stored
  • We only retain minimal transaction metadata for debugging and support
  • Funds are instantly forwarded without us having control over them

6. Data Storage and Security

We implement industry-standard security measures:

  • Encryption of data in transit and at rest
  • Regular security audits and updates
  • Limited access to user data on a need-to-know basis
  • Secure infrastructure with reputable cloud providers
  • No storage of sensitive financial information

7. Third-Party Services

We may use third-party services that have their own privacy policies:

  • hCaptcha: For bot prevention and security
  • Analytics Providers: For anonymous usage statistics
  • Email Service Providers: For sending requested notifications
  • Ramp Partners: For fiat-to-crypto conversions (subject to their privacy policies)

We carefully select third-party partners who respect user privacy and comply with applicable data protection laws.

8. Cookies and Tracking

We use minimal cookies and similar technologies:

  • Essential Cookies: Required for the Services to function properly
  • Analytics Cookies: To understand how users interact with our Services (anonymous)
  • Preference Cookies: To remember your settings and preferences

You can control cookies through your browser settings. Disabling cookies may affect some features of our Services.

9. Data Retention

We retain information only as long as necessary to provide our Services and comply with legal obligations:

  • Email addresses: Until you unsubscribe or request deletion
  • Support inquiries: Up to 2 years for quality assurance
  • Transaction metadata: 90 days for debugging purposes
  • Analytics data: Aggregated and anonymized indefinitely

10. Your Rights

You have the right to:

  • Access information we have about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Opt-out of marketing communications
  • Export your data in a portable format

To exercise these rights, contact us at admin@strawberrylabs.net

11. Children's Privacy

Our Services are not intended for children under 18 years of age. We do not knowingly collect information from children. If we discover that we have inadvertently collected information from a child, we'll promptly delete it.

12. International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email (if we have your address). Your continued use of our Services after changes indicates acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Strawberry Labs LLC
Email: admin@strawberrylabs.net
Privacy Officer: Available at the above email

This Privacy Policy is part of our commitment to transparency and user privacy. We believe in giving you control over your data while providing secure, efficient cryptocurrency services.